Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Sep 17, 2026
Malicious code in kiki-jus43-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gembus52-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gorengan88-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gorengan31-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jengkol89-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ikan26-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jus49-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gaplek58-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gaplek31-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-dradag59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gaplek3-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-dodol47-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gado-gado97-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-dodol6-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-empal30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-empal71-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-donat34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gaplek39-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-dradag74-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gado-gado79-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-dradag14-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-donat91-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-enting98-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-dodol69-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-dodol61-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gaplek24-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gandul32-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-empal37-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-empal58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-enting2-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-donat51-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gaplek45-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-enting14-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-donat50-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-donat41-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-enting19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-enting5-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-enting26-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gandul63-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-donat29-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gado-gado30-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-empal87-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-dradag95-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-esdoger28-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-empal7-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-dodol51-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-enting70-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-empal11-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-donat52-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-botok37-riris (npm)
1 compromised version
Page 261 of 7,324